feat(external-secrets): implement automatic certificate rotation for deployments (#1690)